The researchers also managed to get an Android antivirus app to download and install fake virus signatures that then identified the antivirus tool as a virus and gave the user the opportunity to remove it.
FORBES: Researchers Find Flaws In Android Apps That Leave Millions Vulnerable To Password, Online Banking Credentials, And Email Data Theft